AWS kms documentation change
Summary
Updated terminology from 'aws-managed-cmk' to 'aws-managed-key' and 'customer-cmk' to 'customer-mgn-key' throughout the document
Security assessment
Changes reflect terminology updates (CMK to KMS key) without introducing security content or addressing vulnerabilities. No security implications detected in terminology standardization.
Diff
diff --git a/kms/latest/developerguide/kms-alias.md b/kms/latest/developerguide/kms-alias.md index a2af96877..5b3dee424 100644 --- a//kms/latest/developerguide/kms-alias.md +++ b//kms/latest/developerguide/kms-alias.md @@ -11 +11 @@ An _alias_ is a friendly name for a AWS KMS key. For example, an alias lets you -You can use an alias to identify a KMS key in the AWS KMS console, in the [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) operation, and in [cryptographic operations](./kms-cryptography.html#cryptographic-operations), such as [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) and [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html). Aliases also make it easy to recognize an [AWS managed key](./concepts.html#aws-managed-cmk). Aliases for these KMS keys always have the form `aws/`<service-name>``. For example, the alias for the AWS managed key for Amazon DynamoDB is `aws/dynamodb`. You can establish similar alias standards for your projects, such as prefacing your aliases with the name of a project or category. +You can use an alias to identify a KMS key in the AWS KMS console, in the [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) operation, and in [cryptographic operations](./kms-cryptography.html#cryptographic-operations), such as [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) and [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html). Aliases also make it easy to recognize an [AWS managed key](./concepts.html#aws-managed-key). Aliases for these KMS keys always have the form `aws/`<service-name>``. For example, the alias for the AWS managed key for Amazon DynamoDB is `aws/dynamodb`. You can establish similar alias standards for your projects, such as prefacing your aliases with the name of a project or category. @@ -62 +62 @@ The alias and its KMS key must be in the same account and Region. -You can associate an alias with any [customer managed key](./concepts.html#customer-cmk) in the same AWS account and Region. However, you do not have permission to associate an alias with an [AWS managed key](./concepts.html#aws-managed-cmk). +You can associate an alias with any [customer managed key](./concepts.html#customer-mgn-key) in the same AWS account and Region. However, you do not have permission to associate an alias with an [AWS managed key](./concepts.html#aws-managed-key). @@ -121 +121 @@ When you create a KMS key in the AWS KMS console, you must give it a new alias. -AWS creates aliases in your account for [AWS managed keys](./concepts.html#aws-managed-cmk). These aliases have names of the form `alias/aws/`<service-name>``, such as `alias/aws/s3`. +AWS creates aliases in your account for [AWS managed keys](./concepts.html#aws-managed-key). These aliases have names of the form `alias/aws/`<service-name>``, such as `alias/aws/s3`.